{"id":"iam-explicit-deny-always-wins","text":"An explicit deny in any applicable IAM policy type always overrides any allow from any other policy type.","truth_value":"IN","source":"entries/2026/03/08/iam-policies.md","source_url":"","source_hash":"461949800f4e3d9e","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-explicit-deny-always-wins","truth_value":"IN","reason":"premise"}]}}